On 17.01.2011 15:48, Sam Varshavchik wrote:
> You should have $SENDER available.
> And, once again, make sure that you fully understand how all your
> manufactured shell scripting needs to quote its variables. Otherwise,
> you'll have an exploitable security hole on your hands.

Well, I didn't see the sender's email in any variable when doing
`set >/tmp/log.txt`.

I added before that a line:
MAILTO=escape($SENDER)

And now I did have in /tmp/log.txt:
MAILTO=

But no SENDER or anything else to use with mailbot. So if
I should have it, why I don't have it?

DEFAULTDELIVERY="|| /usr/lib/courier/bin/dotforward
| /usr/lib/courier/bin/maildrop -w 90"


-- 
Yhteistyöterveisin,
Jani Ollikainen @ Pronetko Networks Oy

------------------------------------------------------------------------------
Protect Your Site and Customers from Malware Attacks
Learn about various malware tactics and how to avoid them. Understand 
malware threats, the impact they can have on your business, and how you 
can protect your company and customers by using code signing.
http://p.sf.net/sfu/oracle-sfdevnl
_______________________________________________
courier-users mailing list
courier-users@lists.sourceforge.net
Unsubscribe: https://lists.sourceforge.net/lists/listinfo/courier-users

Reply via email to